Grupo Alarcos · Conference paper · 2009
Management of scorecards and metrics to manage security in SMEs
Luis Enrique Sánchez Crespo, Daniel Villafranca, Eduardo Fernández-Medina Patón, Mario Piattini Velthuis
Information Society depends more and more on Information Security Management Systems (ISMSs) and the availability of these systems has become vital for the evolution of Small and Medium Enterprises (SMEs). However, this kind of enterprises requires that ISMSs are adapted to their special characteristics and optimized from the viewpoint of the necessary resources to implement and maintain them. This paper presents the mechanisms included in the security management methodology for SMEs called MGSM-PYME that enables the responsible for security to have at all times knowledge of the level of security management of the enterprise. This model is being directly applied to real cases, thus obtaining a constant improvement in its application.